Introduce recv timeout controlled by '-T' option in http.c This should prevent a DDoS attack where attacker and keeps the connection open but send no data.

fun main () : transaction page =
    s <- source 0;
    n <- get s;
    set s (n + 1);
    n' <- get s;
    return <xml>{[n']}</xml>